Hi, When I issue the following command, I get an error: # ip6tables -v -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT ACCEPT all opt in * out * ::/0 -> ::/0 state RELATED,ESTABLISHED ip6tables: Unknown error 18446744073709551615 The rule isn't inserted: lightspeed edwin # ip6tables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination The libip6t_state exists: lightspeed edwin # ls -l /lib/iptables/libip6t_state.so -rwxr-xr-x 1 root root 5088 Feb 5 21:12 /lib/iptables/libip6t_state.so Any ideas on how to debug this error? Kind regards, Edwin ----------------------------------------------------------- Output of 'emerge -vp iptables': [ebuild R ] net-firewall/iptables-1.3.5 USE="ipv6 -extensions -static" 0 kB Output of emerge --info: Portage 2.1_pre4-r1 (default-linux/amd64/2005.1, gcc-3.4.3, glibc-2.3.5-r0, 2.6.15-gentoo-r3 x86_64) ================================================================= System uname: 2.6.15-gentoo-r3 x86_64 AMD Athlon(tm) 64 Processor 3200+ Gentoo Base System version 1.6.13 ccache version 2.4 [enabled] dev-lang/python: 2.3.5-r2 sys-apps/sandbox: 1.2.11 sys-devel/autoconf: 2.13, 2.59-r6 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.15.92.0.2-r10 sys-devel/libtool: 1.5.18-r1 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="amd64 ~amd64" AUTOCLEAN="yes" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=k8 -pipe -O2" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/splash /etc/terminfo /etc/env.d" CXXFLAGS="-march=k8 -pipe -O2" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig ccache distlocks sandbox sfperms strict" GENTOO_MIRRORS="http://ftp.roedu.net/pub/mirrors/gentoo.org/" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="amd64 X aac acpi alsa avi berkdb bitmap-fonts cdr crypt cups dvd eds emboss encode foomaticdb fortran gif gpm gstreamer gtk2 imlib ipv6 jpeg kde lzw lzw-tiff mp3 mpeg ncurses nls nvidia opengl pam pdflib perl png python qt quicktime readline sdl spell ssl tcpd tiff truetype-fonts type1-fonts usb userlocales xpm xv zlib elibc_glibc kernel_linux userland_GNU" Unset: ASFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY
It seems to be a common problem with ip6tables, and the state match, see: https://lists.netfilter.org/pipermail/netfilter/2006-February/064672.html (the error code is different there)
upstream issue ... better to track it there
I am sseing this error in IPv4 iptables https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=467